Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
File: io0ZrTHISnSFawprPMEA5HorKqw.mft (raw, json)
Hash identifier: FIUHL/8/407jyIOseA/uAkr3bgllWVnXaBBrcSAxzf0=
Subject key identifier: A8:63:F7:73:B5:42:F1:EE:2D:B0:15:94:4E:72:3E:D5:51:FE:55:8C
Authority key identifier: 8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
Certificate issuer: /CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Certificate serial: 019E1E6C9B42B14D7FC1006048E927E560F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
Manifest number: 0CFF
Signing time: Tue 12 May 2026 23:01:34 +0000
Manifest this update: Tue 12 May 2026 23:01:34 +0000
Manifest next update: Wed 13 May 2026 23:01:34 +0000
Files and hashes: 1: io0ZrTHISnSFawprPMEA5HorKqw.crl (hash: +Ir9TF1oCALRLNLSrPJax9/QbZ2o20cvgS5bE3jB5d0=)
2: quTJbQmG0wYBBRFhrjbNtJHrXMQ.roa (hash: QoyxpX44rQlyLQKQYNYLnT369J4osXzhEZfhimIdwCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:9b:42:b1:4d:7f:c1:00:60:48:e9:27:e5:60:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Validity
Not Before: May 12 23:01:34 2026 GMT
Not After : May 13 23:01:34 2026 GMT
Subject: CN=a863f773b542f1ee2db015944e723ed551fe558c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b0:bc:60:01:49:19:57:d3:06:42:22:b0:7e:
c8:57:46:26:b6:a4:b5:25:88:00:d2:95:6f:ca:2b:
83:80:4c:05:35:34:d9:4e:36:8c:b5:2c:7c:1f:8d:
93:dd:f3:01:1d:0c:08:33:d3:6e:2c:66:92:6e:23:
b7:82:cc:e4:b1:48:ec:50:5c:be:89:0b:86:85:82:
2e:48:d0:48:f7:cb:21:58:fe:03:ac:0d:42:0d:ae:
db:b6:f5:46:df:7c:e6:11:4c:91:bb:08:77:39:0c:
ea:1e:df:96:43:40:6d:e4:61:44:98:fb:95:71:20:
dd:42:78:5f:87:27:a4:ba:fc:af:f3:f6:1c:6e:4a:
15:c1:90:8d:73:f4:3c:f5:fa:b1:91:c3:11:bb:01:
fd:9e:41:18:cb:1e:d6:59:bf:21:fc:0e:df:76:58:
2e:e9:79:7c:69:9c:cf:e5:09:aa:5f:ba:7b:f5:85:
1d:f5:f0:3a:ce:35:27:f1:2e:a6:28:66:05:2e:cb:
2d:37:2b:c5:86:08:f2:0a:26:63:f8:41:7f:c9:19:
19:0c:39:4e:c5:7f:63:65:1c:34:f1:e8:2c:d1:51:
ec:bb:1a:c1:33:39:1d:e4:41:e3:9c:0f:10:e9:53:
02:d6:d2:4d:ef:47:d6:c5:6e:dc:96:e6:5f:85:05:
b6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:63:F7:73:B5:42:F1:EE:2D:B0:15:94:4E:72:3E:D5:51:FE:55:8C
X509v3 Authority Key Identifier:
keyid:8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ad:bf:49:16:b3:89:bd:08:50:b4:da:58:4b:d8:dc:67:45:
f1:fa:fd:2b:94:4d:49:e2:e0:52:16:37:43:dd:7c:6d:82:9c:
8b:ac:28:13:6c:bc:21:77:21:ca:52:96:65:cc:b6:c0:17:42:
93:34:4d:b8:a2:72:db:8a:a7:e4:92:29:27:dc:8e:38:36:bf:
41:b3:f0:98:0f:95:92:5c:59:61:f7:41:80:f5:17:e2:d9:38:
49:d8:ae:2b:f9:60:15:77:92:5b:13:47:68:7f:37:e1:6d:76:
86:4a:b7:7e:08:f3:bb:2a:d0:b1:22:31:e3:df:91:78:12:3f:
13:ef:c4:2a:cd:39:5a:73:83:dd:c3:b7:75:74:b0:cf:13:4f:
ca:82:97:d8:ff:07:07:7e:11:3f:d1:9e:a3:f1:f3:02:d0:5a:
02:63:c6:f5:2e:2f:da:4f:5c:ae:b9:ab:c7:92:89:72:e0:35:
77:e9:86:c7:ba:b4:e0:43:83:70:b4:bd:58:ae:77:c0:6a:cc:
7b:df:31:9a:6a:cd:22:ea:f6:38:3b:94:71:9a:10:6c:6a:1d:
c0:2b:4a:78:f1:4d:ef:41:43:ed:7f:5e:05:0c:84:97:56:3f:
21:b1:2c:9b:2e:d7:1e:5d:a2:0b:8c:df:42:1e:b3:85:01:d2:
48:75:25:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebJtCsU1/wQBgSOkn5WDyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhOGQxOWFkMzFjODRhNzQ4NTZiMGE2YjNjYzEwMGU0N2Ey
YjJhYWMwHhcNMjYwNTEyMjMwMTM0WhcNMjYwNTEzMjMwMTM0WjAzMTEwLwYDVQQD
EyhhODYzZjc3M2I1NDJmMWVlMmRiMDE1OTQ0ZTcyM2VkNTUxZmU1NThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17C8YAFJGVfTBkIisH7IV0YmtqS1
JYgA0pVvyiuDgEwFNTTZTjaMtSx8H42T3fMBHQwIM9NuLGaSbiO3gszksUjsUFy+
iQuGhYIuSNBI98shWP4DrA1CDa7btvVG33zmEUyRuwh3OQzqHt+WQ0Bt5GFEmPuV
cSDdQnhfhyekuvyv8/YcbkoVwZCNc/Q89fqxkcMRuwH9nkEYyx7WWb8h/A7fdlgu
6Xl8aZzP5QmqX7p79YUd9fA6zjUn8S6mKGYFLsstNyvFhgjyCiZj+EF/yRkZDDlO
xX9jZRw08egs0VHsuxrBMzkd5EHjnA8Q6VMC1tJN70fWxW7cluZfhQW2wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhj93O1QvHuLbAVlE5yPtVR/lWMMB8GA1UdIwQY
MBaAFIqNGa0xyEp0hWsKazzBAOR6KyqsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW8wWnJUSElTblNGYXdwclBNRUE1SG9yS3F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mZjYzYTgtOTc0Yy00Y2NjLThjZDgt
MjQwMjM0MDNiYjBjLzEvaW8wWnJUSElTblNGYXdwclBNRUE1SG9yS3F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9mZjYzYTgtOTc0Yy00Y2NjLThjZDgtMjQwMjM0MDNiYjBj
LzEvaW8wWnJUSElTblNGYXdwclBNRUE1SG9yS3F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAq2/SRaz
ib0IULTaWEvY3GdF8fr9K5RNSeLgUhY3Q918bYKci6woE2y8IXchylKWZcy2wBdC
kzRNuKJy24qn5JIpJ9yOODa/QbPwmA+VklxZYfdBgPUX4tk4SdiuK/lgFXeSWxNH
aH834W12hkq3fgjzuyrQsSIx49+ReBI/E+/EKs05WnOD3cO3dXSwzxNPyoKX2P8H
B34RP9Geo/HzAtBaAmPG9S4v2k9crrmrx5KJcuA1d+mGx7q04EODcLS9WK53wGrM
e98xmmrNIur2ODuUcZoQbGodwCtKePFN70FD7X9eBQyEl1Y/IbEsmy7XHl2iC4zf
Qh6zhQHSSHUlGw==
-----END CERTIFICATE-----
Generated at Wed May 13 09:31:40 2026 by rpki-client